Malicious code in raid-shadow-legends-hack118 (npm)

The package raid-shadow-legends-hack118 was found to contain malicious code...

Malicious code in raid-shadow-legends-hack335 (npm)

The package raid-shadow-legends-hack335 was found to contain malicious code...

MAL-2025-45748 Malicious code in raid-shadow-legends-hack104 (npm)

The package raid-shadow-legends-hack104 was found to contain malicious code...

MAL-2025-45744 Malicious code in raid-shadow-legends-codes905 (npm)

The package raid-shadow-legends-codes905 was found to contain malicious code...

MAL-2025-45745 Malicious code in raid-shadow-legends-codes962 (npm)

The package raid-shadow-legends-codes962 was found to contain malicious code...

Malicious code in raid-shadow-legends-promo-codes288 (npm)

The package raid-shadow-legends-promo-codes288 was found to contain malicious code...

Malicious code in raid-shadow-legends-generator028 (npm)

The package raid-shadow-legends-generator028 was found to contain malicious code...

Malicious code in raid-shadow-legends-codes499 (npm)

The package raid-shadow-legends-codes499 was found to contain malicious code...

MAL-2025-45743 Malicious code in raid-shadow-legends-codes499 (npm)

The package raid-shadow-legends-codes499 was found to contain malicious code...

MAL-2025-45750 Malicious code in raid-shadow-legends-hack335 (npm)

The package raid-shadow-legends-hack335 was found to contain malicious code...

MAL-2025-45751 Malicious code in raid-shadow-legends-hack505 (npm)

The package raid-shadow-legends-hack505 was found to contain malicious code...

MAL-2025-45749 Malicious code in raid-shadow-legends-hack118 (npm)

The package raid-shadow-legends-hack118 was found to contain malicious code...

MAL-2025-45742 Malicious code in raid-shadow-legends-codes489 (npm)

The package raid-shadow-legends-codes489 was found to contain malicious code...

CVE-2025-9276

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...

shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by leveraging newuidmap for access to an NFS home directory (or same-host resources in the case of remote logins by these local network users). NOTE: it may also be argued that system administrators should not have assigned uids, within local networks, that are within the range that can occur in /etc/subuid.

...

CVE-2025-9806

A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etcro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high...

Tenda W12 Hardcoding Vulnerability

Tenda W12 is a dual-band Gigabit wireless panelized access point AP from Tenda Technology, designed for hotels, villas, large homes and other scenarios, supporting the IEEE802.11ac protocol and the Wave2 standard with 1167Mbps dual-band concurrent rate. The Tenda W12 suffers from a hard-coded...

KVM: s390: vsie: fix race during shadow creation

...

CVE-2025-9778

A security vulnerability has been detected in Tenda W12 up to 3.0.0.63948. Affected is an unknown function of the file /etcro/shadow of the component Administrative Interface. The manipulation leads to hard-coded credentials. An attack has to be approached locally. The complexity of an attack is...

CVE-2025-9276 Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The specific flaw...